xen-pv-config: Allow consumer to set perms on rootfs. Default to read/write.
integral-image-ndvm-pkg: Expose NDVM rootfs as read only through the xen config.